Mirrors/hackacad
2
0
Fork 0
mirror of https://github.com/hackacad/bastille.git synced 2025-12-20 09:10:15 +01:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #1200 from BastilleBSD/firewall_fix

Browse Source 
update default firewalls to support ipv6 by default
This commit is contained in:
tschettervictor
2025-07-22 11:45:30 -06:00
committed by GitHub
parent c86c4bce72 5e79dcb1d2
commit 46c7f3d230
3 changed files with 3 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
docs/chapters/gcp.rst
View File

@@ -69,7 +69,7 @@ them through the external interface:
pass out pass out
pass in proto tcp to port {22} pass in proto tcp to port {22}
pass in inet proto icmp icmp-type { echoreq } pass in proto icmp icmp-type { echoreq }
pass in on $bridge_if pass in on $bridge_if
Restart the host and make sure everything comes up correctly. You should see the Restart the host and make sure everything comes up correctly. You should see the

2
docs/chapters/networking.rst
View File

@@ -469,7 +469,7 @@ Create the firewall rules:
block in all block in all
pass out quick keep state pass out quick keep state
antispoof for $ext_if inet antispoof for $ext_if inet
pass in inet proto tcp from any to any port ssh flags S/SA modulate state pass in proto tcp from any to any port ssh flags S/SA modulate state
- Make sure to change the ``ext_if`` variable to match your host system - Make sure to change the ``ext_if`` variable to match your host system
interface. interface.

2
usr/local/share/bastille/setup.sh
View File

@@ -277,7 +277,7 @@ rdr-anchor "rdr/*"
block in all block in all
pass out quick keep state pass out quick keep state
antispoof for \$ext_if inet antispoof for \$ext_if inet
pass in inet proto tcp from any to any port ssh flags S/SA keep state pass in proto tcp from any to any port ssh flags S/SA keep state
EOF EOF
sysrc pf_enable=YES sysrc pf_enable=YES
warn "pf ruleset created, please review ${bastille_pf_conf} and enable it using 'service pf start'." warn "pf ruleset created, please review ${bastille_pf_conf} and enable it using 'service pf start'."